CVE-2018-5282

Kentico 9.0 through 11.0 has a stack-based buffer overflow via the SqlName, SqlPswd, Database, UserName, or Password field in a SilentInstall XML document

published January 8, 2018

CVSS
—
EPSS
2%
Percentile
74.7
In the wild
Unconfirmed
What it is

Kentico 9.0 through 11.0 has a stack-based buffer overflow via the SqlName, SqlPswd, Database, UserName, or Password field in a SilentInstall XML document. NOTE: the vendor disputes this issue because neither a buffer overflow nor a crash can be reproduced; also, reading XML documents is implemented exclusively with managed code within the Microsoft .NET Framework

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01549 · 74.7th percentile
Published
2018-01-08T09:00Z
EPSS history
Timeline
  • 08 JAN 09:00Z
    Kentico 9.0 through 11.0 has a stack-based buffer overflow via the SqlName, SqlPswd, Database, UserName, or Password field in a SilentInstall XML document
    cvelistv5